Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa
File: 51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa (raw, json)
Hash identifier: GR3bpAGXR04YHOweJmRSLtNpeh/d9LSY5kgm3h82z1Q=
Subject key identifier: F6:44:EA:23:9E:A6:8F:BA:0C:CA:13:95:4B:68:5B:6F:59:BB:12:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 415E3DC60BA6889892801C3FC41ABC3EEEBD5858
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa
Signing time: Thu 22 Oct 2026 03:50:16 +0000
ROA not before: Thu 22 Oct 2026 03:50:16 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5e:3d:c6:0b:a6:88:98:92:80:1c:3f:c4:1a:bc:3e:ee:bd:58:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:16 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=6034030e16b9d215342ffa5622c189fd54ab5741e6cb94a94c4e8af310bc3fbb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:2c:c4:e1:a9:82:35:50:5d:40:d4:a8:a4:
af:bf:be:a8:73:18:65:64:93:f6:40:bf:4e:1b:2a:
e3:9d:82:93:3f:05:e5:73:a5:61:3d:8a:cc:84:37:
89:2d:0b:1e:86:e8:af:fe:ac:e4:b0:71:a4:71:53:
0e:0e:30:40:35:d5:f7:0d:bc:c8:60:04:1d:da:0d:
44:0c:74:38:90:ea:7b:83:7e:90:9c:33:51:8d:9a:
83:a1:2d:6b:9c:5b:fa:c4:25:05:ee:6b:82:8d:bf:
b0:e5:ec:aa:c7:ab:f6:f6:88:66:74:f4:e3:1e:0d:
80:5e:eb:00:22:0c:45:e6:c6:1b:ed:5d:ec:11:7b:
27:a2:64:7f:bf:f4:4a:6d:31:c8:7a:1e:6e:b2:19:
f4:8e:e1:b9:16:d3:3f:f0:0b:c5:a9:7c:b7:f8:26:
64:9e:1d:95:02:dd:8c:3d:35:c8:9a:0c:33:f9:43:
3b:b3:2f:a6:69:71:e3:c6:2b:22:cd:29:8a:c2:43:
04:de:9f:08:97:82:da:c3:21:f0:67:37:b8:fb:1d:
1e:10:46:d9:37:44:00:90:ff:2f:fd:d7:25:e9:e4:
ec:ee:fc:6d:86:39:30:a2:00:3a:79:e2:9b:c8:da:
6e:a9:c9:80:0c:00:86:08:3d:b4:b7:ec:c9:76:e2:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:EA:23:9E:A6:8F:BA:0C:CA:13:95:4B:68:5B:6F:59:BB:12:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2000::/40
Signature Algorithm: sha256WithRSAEncryption
94:2c:b2:84:d1:2e:0c:c2:3a:8c:b1:00:b6:45:a9:45:f7:0d:
78:fb:a1:5c:5f:d4:7b:12:14:7b:8f:65:1b:0f:be:62:a5:b9:
a3:06:4a:d0:76:a8:db:6b:38:05:fd:2d:58:ca:f4:4d:12:02:
5f:16:d7:55:89:9d:8a:07:35:bc:24:0a:75:77:53:2a:80:4b:
6d:76:16:d1:d7:93:b8:32:b9:3e:b1:b2:c8:f3:40:4d:92:a3:
b1:d7:c7:16:fa:18:b7:c8:99:f7:9f:b7:0c:44:a6:0e:48:42:
b4:15:bb:8c:fb:a4:ae:21:b7:e1:2a:88:27:8f:8e:90:3e:02:
11:dc:be:b6:0c:5e:25:0a:92:86:cf:e4:86:04:cd:cf:8d:aa:
56:70:3d:77:5d:53:19:95:02:eb:3b:d3:25:6e:01:4b:b3:a1:
7a:e0:c2:9d:bc:d9:26:b0:f0:cf:23:d9:39:76:bf:9b:e1:45:
42:a2:5f:8b:dc:35:be:90:85:24:25:9f:89:bb:bc:2e:05:3f:
a7:cf:5d:36:73:f9:71:84:9f:17:df:4d:26:3e:3e:68:d3:67:
91:04:5e:16:45:d4:28:a1:7e:94:c8:e9:3c:87:dc:6b:12:4c:
10:ae:62:c4:11:a0:54:91:78:42:bd:9d:92:4d:01:94:6e:fc:
af:36:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:47 2026 by rpki-client